Repository navigation
Releases: VinceTree/Everpeace
Release list
v0.6.0-rc.1
v0.6.0-rc.1 — verification, privacy and workspace candidate
Source prerelease for the ten-area optimization work. Production repair remains at most three rounds; team mode remains opt-in.
- Bind verification to workspace/report identity and changed lines; distinguish project scripts from host independent acceptance.
- Strengthen credential redaction, attachment scanning, retention/storage visibility, and provenance-bound Memory review.
- Add recoverable host-managed binary integration with streaming hashes and concurrent-edit preservation.
- Separate model protocol, task lifecycle, tool dispatch and history ownership; expand safe performance diagnostics.
- Improve DOM extraction and compare 24 frozen licensed document pages; add generated safety and real-child fault tests.
- Restore exact dependency locks, toolchain, source-install checks and reproducible unlimited metered model campaigns.
Real experiments did not meet promotion gates: repair 46/120 planned passes; team 0/120. Unknown usage, failed requests, cleanup failures and all pending skips are retained. Memory completed 90 requests with 89 accepted answers; stale-memory filtering passed all 30 cases. These are synthetic tasks, not proof of general repository productivity.
Windows source checks and installation smoke were rerun. See the candidate handoff for exact receipts, skips and CI status, and the acceptance report for each item.
Distribution: tagged source plus sanitized evidence only. No npm publication or portable native package is claimed. Hosted Windows/Linux source checks passed; local WSL and dedicated native delivery coverage remain pending. Existing formal-package gates remain enforced.
源码预发布：补强验证证据、隐私、Memory、团队原始字节整合、状态所有权、Web 抽取及性能诊断。真实模型修复/团队对照证据不足，保留三轮上限和显式团队配置。Memory 过滤验证通过，整体回答 89/90 通过。失败、跳过、未知 Token 和清理错误均保留。
提供带标签源码和脱敏证据，不发布 npm，也不宣称跨平台原生安装包已通过门禁。逐项状态和复现方式见上述报告。
v0.5.2
Security patch / 安全补丁
-
Require independent, persistent startup approval for MCP stdio programs. Bind trust to the workspace, server and frozen launch configuration; reject stale approval and revoke live capability bindings and connections.
-
Reject all non-loopback plaintext MCP HTTP endpoints before sending credentials. Require separate approval for loopback HTTP, pin localhost connections to loopback, retain HTTPS certificate validation and block every redirect across SDK requests, including SSE.
-
Stop headless CLI/SDK runs with
interaction_requiredbefore model requests when enabled MCP servers need startup approval. Redact launch arguments, authentication values and endpoint queries from diagnostics. -
Add independent IANA address boundary/format regressions and reject scoped IPv6 in the public Web network layer. Retain DNS binding and TLS identity protections.
-
MCP stdio 服务需要独立、按工作区持久保存的启动批准；配置变化或过期预览不能沿用授权，撤销使活动工具绑定失效并关闭服务。
-
非回环明文 HTTP 全部拒绝，本机 HTTP 单独批准；localhost 固定连接回环，HTTPS 保留证书校验，SDK 各请求路径与 SSE 均禁止重定向。
-
非交互 CLI/SDK 缺少启动信任时，在模型请求前返回
interaction_required；诊断中脱敏启动参数、认证值和端点查询。 -
补充独立 IANA 地址边界和格式回归，公共 Web 拒绝 scoped IPv6，并保留 DNS 绑定与 TLS 身份验证。
Upgrade notes / 升级说明
Existing stdio configurations are not automatically trusted. Review each service with /mcp trust <server>, then use /mcp reconnect. Loopback HTTP requires its own exception. Startup approval permits the program to run with the host user's permissions; this patch does not add an MCP process sandbox or verify the integrity of its program or dependencies.
既有 stdio 配置不会自动变为可信。请使用 /mcp trust <server> 审阅批准，再 /mcp reconnect；本机 HTTP 也需独立批准。启动批准仍代表宿主用户权限，本补丁不提供 MCP 进程沙箱或程序与依赖完整性验证。
Validation / 验证
Local typecheck, lint, full tests and build passed. The real Windows Terminal fixture covered approval, cancellation, revocation and resize. GitHub Actions validated the tagged candidate on Windows and Ubuntu. Test skips retain their platform limitations.
本地类型检查、lint、全量测试及构建通过；真实 Windows Terminal fixture 完成批准、取消、撤销与 resize 验收；对应候选通过 Windows/Ubuntu GitHub Actions。平台跳过仍保留其验证限制。
v0.5.1
Patch fixes / 补丁修复
This patch hardens existing network and task boundaries and corrects verification and accounting gaps. The existing single-Agent and opt-in team behavior remains the product scope.
本次为补丁更新，重点修复现有网络、安全边界、资源清理和计量问题，并补齐工程验收门禁。
- Bind public-resource connections to validated DNS addresses for web search, page reads, Skill downloads and Git clones. Preserve the original Host/TLS identity and revalidate every redirect.
- Keep HTTP/HTTPS proxy CONNECT targets bound to approved IPs, isolate proxy authentication and refuse insecure/direct fallbacks.
- Close response bodies, dispatchers, Git tunnels and owned processes on failure or cancellation; prevent inherited Git rewrites, proxies and credential helpers from changing approved targets.
- Correct approval cancellation propagation and team benchmark usage rollups; preserve unknown usage and stop evaluation on isolation or cleanup failures.
- Enforce Oxlint correctness checks and the ordered typecheck → lint → test → build gates on Windows/Linux. Pin the patched native dependency and verify clean source installation, CLI/SDK startup and PTY lifecycle.
网页与远程 Skill 请求现在将 DNS 校验结果绑定到实际连接；HTTP/HTTPS 代理与 Git 转发器使用相同批准目标。保持 TLS 证书校验，代理失败不静默直连；Git 配置注入、取消竞态和响应释放边界具有真实本地网络回归。
Validation: local typecheck, lint, 1,135 tests (1,132 passed, 3 platform skips), build and whitespace checks; clean source installation and native PTY lifecycle checks. Windows/Linux CI is verified against the tagged commit before publication. Real local native isolation evidence is retained; hosted skips do not substitute for containment evidence.
当前支持仓库内 pnpm 源码安装。独立安装包/npm 分发仍需解决补丁交付，不把 pnpm pack 成功视为消费者安装通过。本次 GitHub Release 不执行 npm publish。
Current-candidate offline team preflight and scoring evidence do not establish live-model quality, speed or cost improvements. No paid model calls were made; live evaluation still needs explicit model/profile and numerical task/campaign authorization.
离线评测准备不能转记为真实模型验收。本次没有付费模型调用，也不宣称团队更快、更省或成功率更高。
v0.5.0
Multi-agent collaboration / 多 Agent 协作
Collaboration is now available across the TUI, CLI and SDK. It stays off by default: a root Agent can delegate to up to two independently scoped members and integrates their results before host verification.
多 Agent 协作现已接入 TUI、CLI 与 SDK，默认关闭。开启后由主 Agent 调度最多两个成员，支持 explorer、worker、reviewer 的独立注册模型、任务上下文及消费明细。
- Add
/teamconfiguration, member details, cancellation, explicit continuation and retained artifact cleanup. - Add detached Git worktrees based on current workspace bytes, native isolation checks and serialized integration that protects concurrent edits.
- Share request/token/time accounting across the team, with durable request IDs and unknown usage stopping new requests.
- Keep final project verification and Goal/Memory success under the root runner.
- Improve project maps, fingerprinted metadata caching, failure diagnostics, managed Skill updates/uninstall and explicit MCP reconnection.
- Fix the Ink history lifecycle when switching between chat and command windows.
- Handle Windows path casing in managed Skill lifecycle and project metadata scans; canonicalize owned test roots in hosted CI.
/team on
everpeace exec "Implement the task and run the project checks" --team协作 JSONL 使用 schema v2，未开启协作仍保持 v1。并行编码要求 Git 根目录及实际原生隔离通过；冲突、中断和失败产物保留，不覆盖用户并发修改。旧 Session 兼容单 Agent 加载，恢复不继承旧审批。
Validation: local typecheck, 1,117 tests (1,114 passed, 3 platform skips), build and whitespace checks; no lint script is configured. Real Windows/Linux native isolation and Windows Terminal interaction evidence are retained. Windows/Linux CI results are recorded against the published commit.
Linux CI keeps AppArmor's system-wide user namespace restriction enabled and loads an application profile for the pinned native Codex binary. Real isolation and production worker integration tests remain required; hosted Windows native skips are not treated as containment evidence.
离线任务对照使用合成 Responses，不涉及付费模型请求，也不证明团队模式更快、更省或成功率更高。安装与依赖要求保持 Node.js 22+ / pnpm 10.22.0；本次 GitHub Release 不进行 npm publish。